Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Rockwell Automation ControlLogix ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
ControlLogix bezeichnet eine Produktfamilie von Steuerungssystemen für Industrieanlagen.
Vulnerabilities 3
-
High 8.7
Rockwell Automation GuardLogix/ControlLogix 5580 Controller denial-of-service Vulnerability via Malformed Packet Handling
CVE-2024-40619 IMPACT A denial-of-service vulnerability exists in the affected products. The vulnerability occurs when a malformed CIP packet is sent over the network to the device and results in a major nonrecoverable fault causing a denial-of-service.
-
High 8.7
Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation
CVE-2024-7507 IMPACT A denial-of-service vulnerability exists in the affected products. This vulnerability occurs when a malformed PCCC message is received, causing a fault in the controller.
-
High 8.7
Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix® 5380 Controller Denial-of-Service Vulnerability via Input Validation
CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major nonrecoverable fault in the controller.
Revision history
-
#1
Initiale Fassung
References
-
Rockwell Automation Advisory vom 2024-08-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201690.html
-
Rockwell Automation Advisory vom 2024-08-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201685.html
-
Rockwell Automation Advisory vom 2024-08-13
https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD%201686.html